CVE-2014-4149 Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly perform TypeFilterLevel checks, which allows remote attackers to execute arbitrary code via crafted da...
HighCVSS 9.3
EPSS 21.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly perform TypeFilterLevel checks, which allows remote attackers to execute arbitrary code via crafted data to a .NET Remoting endpoint, aka "TypeFilterLevel Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft net framework | = 1.1-sp1 | No fix listed |
| Microsoft net framework | = 2.0-sp2 | No fix listed |
| Microsoft net framework | = 3.5 | No fix listed |
| Microsoft net framework | = 3.5.1 | No fix listed |
| Microsoft net framework | = 4.0 | No fix listed |
| Microsoft net framework | = 4.5 | No fix listed |
| Microsoft net framework | = 4.5.1 | No fix listed |
| Microsoft net framework | = 4.5.2 | No fix listed |
References
- blogs.technet.com vendor-advisory
- 1031188 vdb-entry
- MS14-072 vendor-advisory